KnownAutomationRulePropertyConditionSupportedProperty enum

Known values of AutomationRulePropertyConditionSupportedProperty that the service accepts.

Fields

AccountAadTenantId

The account Azure Active Directory tenant id

AccountAadUserId

The account Azure Active Directory user id

AccountName

The account name

AccountNTDomain

The account NetBIOS domain name

AccountObjectGuid

The account unique identifier

AccountPuid

The account Azure Active Directory Passport User ID

AccountSid

The account security identifier

AccountUPNSuffix

The account user principal name suffix

AlertAnalyticRuleIds

The analytic rule ids of the alert

AlertProductNames

The name of the product of the alert

AzureResourceResourceId

The Azure resource id

AzureResourceSubscriptionId

The Azure resource subscription id

CloudApplicationAppId

The cloud application identifier

CloudApplicationAppName

The cloud application name

DNSDomainName

The dns record domain name

FileDirectory

The file directory full path

FileHashValue

The file hash value

FileName

The file name without path

HostAzureID

The host Azure resource id

HostName

The host name without domain

HostNetBiosName

The host NetBIOS name

HostNTDomain

The host NT domain

HostOSVersion

The host operating system

IncidentCustomDetailsKey

The incident custom detail key

IncidentCustomDetailsValue

The incident custom detail value

IncidentDescription

The description of the incident

IncidentLabel

The labels of the incident

IncidentProviderName

The provider name of the incident

IncidentRelatedAnalyticRuleIds

The related Analytic rule ids of the incident

IncidentSeverity

The severity of the incident

IncidentStatus

The status of the incident

IncidentTactics

The tactics of the incident

IncidentTitle

The title of the incident

IncidentUpdatedBySource

The update source of the incident

IoTDeviceId

"The IoT device id

IoTDeviceModel

The IoT device model

IoTDeviceName

The IoT device name

IoTDeviceOperatingSystem

The IoT device operating system

IoTDeviceType

The IoT device type

IoTDeviceVendor

The IoT device vendor

IPAddress

The IP address

MailboxDisplayName

The mailbox display name

MailboxPrimaryAddress

The mailbox primary address

MailboxUPN

The mailbox user principal name

MailMessageDeliveryAction

The mail message delivery action

MailMessageDeliveryLocation

The mail message delivery location

MailMessageP1Sender

The mail message P1 sender

MailMessageP2Sender

The mail message P2 sender

MailMessageRecipient

The mail message recipient

MailMessageSenderIP

The mail message sender IP address

MailMessageSubject

The mail message subject

MalwareCategory

The malware category

MalwareName

The malware name

ProcessCommandLine

The process execution command line

ProcessId

The process id

RegistryKey

The registry key path

RegistryValueData

The registry key value in string formatted representation

Url

The url